Skip to content

Commit 28d2ee6

Browse files
d3zd3zcfriedt
authored andcommitted
net: sockets: tls: Clarify missing entropy warning
Change the wording of the warning printed when there is no entropy to hopefully remove any doubt that there might be security in TLS without an entropy source. TLS connections with insufficient entropy are trivially decodable, and should not be relied on for any type of security. Signed-off-by: David Brown <[email protected]>
1 parent 5cd2b1a commit 28d2ee6

File tree

1 file changed

+1
-1
lines changed

1 file changed

+1
-1
lines changed

subsys/net/lib/sockets/sockets_tls.c

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -283,7 +283,7 @@ static int tls_init(const struct device *unused)
283283

284284
#if !defined(CONFIG_ENTROPY_HAS_DRIVER)
285285
NET_WARN("No entropy device on the system, "
286-
"TLS communication may be insecure!");
286+
"TLS communication is insecure!");
287287
#endif
288288

289289
(void)memset(tls_contexts, 0, sizeof(tls_contexts));

0 commit comments

Comments
 (0)